OU
Product
Oncommand Unified Manager Core Package
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 1
Watch
Add Oncommand Unified Manager Core Package to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1927 | 6.1 | Apr 2 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to… Affected: All versions, or not specified |
| CVE-2020-14002 | 5.9 | Jun 29 | PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation Affected: All versions, or not specified |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2020-14621 | 5.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2017-15906 | 5.3 | Oct 26 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: All versions, or not specified |
Showing 5